CVE-2013-0318

The admin page in the Banckle Chat module for Drupal does not properly restrict access, which allows remote attackers to bypass intended restrictions via unspecified vectors.

Score

CVSS 2.0 10.0 Critical

Status

Modified - secalert@redhat.com

Published

2013-03-27

Last modified

2024-09-16

Weaknesses

CWE-264

Affected products

• Banckle Chat (Banckle Chat Project)

References

• http://drupal.org/node/1916370
• http://www.openwall.com/lists/oss-security/2013/02/21/5